Your privacy is important

This statement outlines the National Ageing Research Institute Limited (NARI)’s policy on how we use and manage personal information.

NARI is bound by the Australian Privacy Principles contained in the Commonwealth Privacy Act and is compliant with the Privacy Amendment (Enhancing Privacy Protection) Act 2012.

NARI may, from time to time, review and update this Privacy Policy to take account of new laws and technology, changes to NARI’s operations and practices and to make sure it remains appropriate to the changing legal environment.

What kind of personal information does NARI collect and how does NARI collect it?

The type of information NARI collects and includes (but is not limited to) personal information, including sensitive information. The types of information which may be collected depends on the nature of your association with us. Personal information may include your name, date of birth, address and other contact details such as your telephone number/s and email address.

Newsletter subscribers

When you subscribe to our newsletter, we collect personal information in order to contact you with information about research, education and fundraising events and activities. We may use your information to contact you to seek financial support for research conducted at NARI. Typically, NARI sends one to two appeal letters each year as well as four issues of our newsletter, Ageing Well. You may opt-out of any communications at any time. If you do not wish us to use your personal information for any of the above purposes, please contact us.

Event registrations

When you register for an event or workshop, we may collect personal information to allow us to process payments, send receipts and send you information about current and future events. All online payments are made through secure gateways that are compliant with the Australian Payment Card Industry Data Security Standard.

Donors

When you make a donation, we may collect your personal information to process payments, send receipts, and to contact you to seek further financial support for our research. We may also contact you with information about our research, education and fundraising events and activities. Typically, NARI sends one to two appeal letters each year as well as four issues of our newsletter, Ageing Well. You may opt-out of any communications at any time. If you do not wish us to use your personal information for any of the above purposes, please contact us.

All online donations are processed through a secure gateway which is compliant with the Australian Payment Card Industry Data Security Standard. Payment details provided by other means (e.g. credit card details provided over the telephone) are securely destroyed once processed. 

We endeavour to recognise the contributions of our supporters in the presentation of our research and in publications such as the NARI Annual Report. If you wish for your support to remain anonymous, please contact us.

My ENJOY Health app users

Users of the My ENJOY Health app ('the app') are required to log in using their mobile number or email address. This information is used to authenticate users and provide a personalised app experience. It also ensures users are able to access all app features. This information is stored securely by NARI and is not used for tracking purposes. It is not shared with third parties or used for any other purposes.

No other personal information is collected by NARI in relation to the use of My ENJOY Health. From time-to-time, generic information about usage (such as frequency of usage, number of users, time and date the app is being used) will be collected for the purpose of evaluating app engagement and usage. This data is not identifiable. Please note that app stores may collect other information that is neither passed to nor retained by NARI: refer to the relevant app store's terms and conditions for more information.

Personal information you provide

NARI will generally collect personal information through an online form or over the phone. You do have the right to seek to deal with us anonymously or using a pseudonym, but in almost every circumstance it will not be practicable for us to deal with you or provide any services to you except for the most general responses to general enquiries, unless you identify yourself.

How will NARI use the personal information you provide?

NARI will use personal information it collects from you for the primary purpose of collection, and for such other secondary purposes that are related to the primary purpose of collection and reasonably expected, or to which you have consented.

In relation to direct marketing, NARI will use your personal information for direct marketing where you have provided that information, and you are likely to expect direct marketing: only then you will be sent direct marketing containing an opt out. If we use your personal information obtained from elsewhere we will still send you direct marketing information where you have consented and which will also contain an opt-out. We will always obtain your consent to use sensitive information as the basis for any of our direct marketing.

Who might NARI disclose personal information to?

Where necessary, and with your consent, we may disclose your personal details to external contractors (such as organisations who assist with our research and educational activities, our mail-outs and independent IT service providers). We only disclose your personal information to contracted service providers on condition that they must protect this information in accordance with NARI’s Privacy Policy and Australian privacy laws. We may also disclose your personal information to third parties where you have consented or we are entitled or required to do so by law. 

Will your personal information be sent overseas? 

NARI does not disclose your personal information to overseas recipients. We do however store some personal information collected about our supporters on servers owned by companies based in the United States of America. Our contractual arrangements comply with the requirements of the Privacy Act and we take reasonable steps to ensure those companies do not breach Australian privacy laws in relation to personal information.

How does NARI treat sensitive information?

In referring to ‘sensitive information’, NARI means:

“information relating to a person’s racial ethnic origin, political opinions, religion, trade union or other professional or trade association membership, sexual orientation or criminal record, that is also personal information; and health information about an individual”.

Sensitive information will be used and disclosed only for the purpose for which it was provided or a directly related secondary purpose, unless you agree otherwise, or the use or disclosure of the sensitive information is allowed by law.

Management and security of personal information

NARI’s staff are required to respect the confidentiality of personal information and the privacy of individuals.

NARI has in place steps to protect the personal information we hold from misuse, loss, unauthorised access, modification, interference or disclosure by use of various methods including locked storage of paper records and password protected access rights to computerised records.

We have a data breach response plan, which we would follow in the unlikely event of a privacy or data breach.

When you use our website, having your cookies enabled will allow us to maintain the continuity of your browsing session. We may also use web beacons, Flash local stored objects and JavaScript. If you adjust your browser settings to block, reject or delete these functions, the webpage may not function in an optimal manner. We may also collect information about your IP address, although this may not identify you

Data collected from you in the course of visiting our website may also be made available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behaviour of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:

1. Your data will be made available to our website provider
2. The data that may be available to them include any of the data we collect as described in this privacy policy.
3. Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.
4. They will store your data for a maximum of 7 years.
5. This processing does not affect your rights as detailed in this privacy policy.

Updating personal information

NARI endeavours to ensure that the personal information we hold is accurate, complete and up-to-date. A person may seek to update their personal information held by NARI by contacting the Privacy Officer of NARI at any time.

The Australian Privacy Principles and the Health Privacy Principles require NARI not to store personal information longer than necessary. In particular, the Health Privacy Principles impose certain obligations about the length of time health records must be stored.

You have the right to check what personal information NARI holds about you.

Under the Commonwealth Privacy Act and the Health Records Act, an individual has the right to obtain access to any personal information which NARI holds about them and to advise NARI of any perceived inaccuracy. There are some exceptions to this right set out in the applicable legislation. To make a request to access any information NARI holds about you, please contact the Privacy Officer in writing.

NARI may require you to verify your identity and specify what information you require.

How long will NARI keep my information?

Under our destruction and de-identification policies, personal information that is no longer required will be de-identified or destroyed.

Enquiries and privacy complaints

If you have any questions or concerns about this Privacy Policy or how your personal information has been handled by NARI, please contact us using the details below. 

We will consider and respond to your complaint within a reasonable period. If you are not satisfied with our response, or you consider that we may have breached the Australian Privacy Principles or the Privacy Act, you are entitled to make a complaint to the Office of the Australian Information Commissioner. The Office of the Australia Privacy Commissioner can be contacted by telephone on 1300 363 992 or full contact details can be found online at www.oaic.gov.au.  

How to contact us 

In writing:	Debra O’Connor Privacy Contact Officer  National Ageing Research Institute  PO Box 2127  Royal Melbourne Hospital   VIC 3050
Telephone:	03 8387 2305
Email:	[email protected]
ABN	71 154 866 047